Skip to content

no http traffic when istio is enabled. #1607

@lesaux

Description

@lesaux

Describe the bug
It seems I am not capturing any HTTP traffic when istio is enabled (default mTLS to permissive).
When I disable istio in the namespace, HTTP traffic is captured.

Provide more information
Running on Google Cloud GKE 1.29.6
Kubeshark v53.3.79 deployed through helm chart (most values kept to default).
Istio-proxy version is gcr.io/gke-release/asm/proxyv2:1.18.7-asm.26

To Reproduce
add istio-injection: enabled label to your ns, bounce pods => no HTTP traffic (except healthchecks which are non mTLS)
remove the label or set to disabled => HTTP traffic is captured normally.

Expected behavior
With istio enabled, I expected HTTP traffic to be captured in addition to TLS traffic.

Reading through the github issues here, it seems a bug similar to what I am seeing was fixed here:
https://github.com/kubeshark/kubeshark/releases/tag/v52.3.69, but I am still not seeing HTTP traffic with v.53.3.79

I must be doing something wrong! I would appreciate if anyone had suggestions to capture HTTP traffic once istio is enabled.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions